DE EN

← Back

Privacy

Applies to collunio · Last updated: 6 November 2026

Data controller

Venzke IKM is responsible up to and including 1 December 2026; from 2 December 2026, Avenumo LLC, 3833 Powerline RD, Suite 201, Fort Lauderdale, FL 33309, USA, info@avenumo.com. Julian Venzke remains the contact person. Full provider details are available in the Legal notice.

What data we process and why

• Account access: Name, email address, company name, password hash, verification and approval status. This information is used for sign-in, account management and access approval. The operator is notified of new registrations and verified accounts.
• Billing: Company profile, logo, addresses and contacts, team members, projects, imported time entries and notes, hourly rates, bank details, invoice drafts and issued PDFs. This data enables the requested reporting and invoicing features.
• Operations and security: Technical requests containing IP addresses and browser details, sessions, rate-limited sign-in attempts, and logs of important changes and support access. These are used to keep the service secure and investigate errors.

Each company remains responsible for the customer, team member and project data it records. We process this data on its behalf to provide the tool. Account management and operations fulfil the service agreement and protect the service. New company accounts are activated after email verification. Subscription status automatically determines whether the work features are available. If access is suspended, data is retained and payment management remains accessible.

Hosting and emails

The application and its database are hosted by Infomaniak Network SA in Switzerland . For verification links, password resets and approval notifications, we use Resend (Plus Five Five, Inc., USA). This involves processing email addresses, necessary account data, message content and delivery information. Email sending uses the Ireland region; further processing by Resend and its service providers takes place particularly in the USA. The tool does not automatically email invoices.

Resend's Data processing agreement contains standard contractual clauses, including adaptations for Switzerland, as a basis for international transfers. Information on other service providers is available in the List of subprocessors. Disclosures to competent authorities may be made where required by law.

Subscriptions and payment processing

Payment processing through Stripe has been prepared but is not yet enabled. Once activated, the company name, contact and billing details, and selected subscription option will be sent to Stripe. Payment methods are entered directly with Stripe; collunio does not store full card numbers or security codes. We store the link to the payment account, plan, payment status and subscription periods to manage access. Payment management remains accessible when access is blocked.

Stripe privacy policy

Access and protection

Data is transmitted over HTTPS. Companies have separate workspaces. In the platform administration, the operator can view registration and approval details. Access to business data through the interface requires a support access grant with a limited duration and scope, which the company can revoke. Administrative server access exists for technical operations; the data is not end-to-end encrypted. From 2 December 2026, the tool will be operated by Avenumo LLC, based in the USA. This does not affect the server location.

Cookies

The tool uses essential cookies for sign-in, your chosen language and form protection. Sign-in sessions expire after eight hours. There are no advertising or analytics trackers; fonts are loaded directly from our own server.

Retention and deletion

Company and invoice data are stored while you use the service. Unconfirmed import previews are deleted after one day; expired verification and password links are removed after a further seven days, and temporary sign-in limits after two days. Cleanup runs daily. Technical logs are deleted through routine log rotation.

Deletion of a company and its account can be requested from the operator. The associated business data will then be deleted from the active system. Backups are retained on a rolling basis for around 30 days. Statutory retention duties or necessary evidence may require certain information to be stored for longer. Companies should export any invoices they need before deletion and fulfil their own retention obligations.

Your rights and contact

You can request access to your personal data and ask for it to be corrected or deleted. Depending on the applicable law, you may have further rights, including data portability, restriction of processing or objection. Please contact julian.venzke@venzke-ikm.ch. For data recorded by a customer company, the operator assists that company in handling the request.

For privacy concerns in Switzerland, you can also contact the Federal Data Protection and Information Commissioner (FDPIC) . Changes to data processing will be published in this policy.